Fix GH-22200: stream api memory leaks.

Report the stream errors before popping the operation off the stack, so
a reentrant error handler that runs another stream operation no longer
reuses the in-flight operation pool slot and orphans its error entry.

While at it, free the docref in php_stream_error_entry_free(), matching the
legacy list destructor.

Author: devnexen

main/streams/stream_errors.c

@@ -215,6 +215,7 @@ static void php_stream_error_entry_free(php_stream_error_entry *entry)
 		zend_string_release(entry->message);
 		efree(entry->wrapper_name);
 		efree(entry->param);
+		efree(entry->docref);
 		efree(entry);
 		entry = next;
 	}
@@ -449,9 +450,6 @@ PHPAPI void php_stream_error_operation_end(php_stream_context *context)
 		return;
 	}
 
-	state->operation_depth--;
-	state->current_operation = php_stream_get_parent_operation();
-
 	if (op->error_count > 0) {
 		if (context == NULL) {
 			context = FG(default_context);
@@ -527,6 +525,9 @@ PHPAPI void php_stream_error_operation_end(php_stream_context *context)
 		}
 	}
 
+	state->operation_depth--;
+	state->current_operation = php_stream_get_parent_operation();
+
 	op->first_error = NULL;
 	op->last_error = NULL;
 	op->error_count = 0;